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Abstract —This paper analyzes the achievable throughput of 
multi-hop sensor networks for industrial applications under 
secrecy constraint. The evaluation scenario comprises sensors 
that measure some relevant information of the plant that is first 
processed hy an aggregator node and then sent to the control 
unit. To reach the control unit, a message may travel through 
relay nodes, which form a multi-hop wireless link. At every hop, 
eavesdropper nodes attempt to acquire the messages transmitted 
through the legitimate link. The communication design problem 
posed here is how to maximize the multi-hop throughput from 
the aggregator to the control unit by finding the best combination 
of relay positions (l.e. hop length: short or long) and coding rates 
(i.e. high or low spectral efficiency) so that the secrecy constraint 
is satisfied. Using a stochastic-geometry formulation, we show 
that the optimal choice of coding rate is normally high and 
depends on the path-loss exponent only, while a greater number 
of shorter hops are preferable to smaller number of longer hops 
in any situation. For the Investigated scenarios, we prove that the 
optimal throughput subject to the secrecy constraint achieves the 
unconstrained optimal performance - if a feasible solution exists. 

Index Terms —Multi-hop wireless networks, stochastic geom¬ 
etry, machine-to-machine communications, throughput, secrecy 


I. Introduction 

Industrial environment imposes challenging conditions on 
radio propagation due to their commonplace reflective and 
absorbent surfaces, as well as electromagnetic interference 
from the machinery ||T]. Recently, wireless solutions for in¬ 
dustrial applications have gained considerable attention from 
both academia and industry, using the concept of machine-to- 
machine communications |2)-0- Such idea enables seamless 
exchange of information between autonomous devices without 
any (direct) human intervention. Another advantage of wireless 
machine-to-machine communications is its scalability, which 
reduces deployment and maintenance costs. 

In industrial plants, exchange of information is often needed 
among the machinery, monitoring devices and control unit; 
thereby, reliability, low latency and security become major 
concerns in the communication system design Q. In this con¬ 
text, multi-hop machine-to-machine communications appear as 
a promising technology to tackle the industrial environment 
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challenges. As pointed out in Q, multi-hop schemes are more 
suitable in such environments with additional interference. 

In a typical plant, the design of a multi-hop link between the 
aggregator and the control unit can be simplified by setting two 
parameters: position of relay nodes and coding rate (spectral 
efficiency). The most straightforward design option would be 
to use long-hops (less use of network resources) and to set 
high coding rates (i.e. more efficient messages in bits/s/Hz). 

Industrial networks usually employ unlicensed frequency 
bands and consequently are exposed to stronger co-channel 
interference. If this is the case, using long hops in conjunction 
with high rates may not be the best choice as far as the former 
leads to lower signal-to-interference ratio (SIR) while the latter 
leads to higher SIR thresholds needed to successfully decode 
a message |[^. 

In large industrial deployments, there are various sensors 
and machines continuously monitoring several processes. The 
resulting information that needs to be exchanged is frequently 
confidential, what requires the communication to be reliable, 
efficient, and secure at all levels of the network infrastructure 
0, ©■ Due to the broadcast nature of the wireless medium, 
non-intended nodes - commonly named eavesdroppers - 
within the communication range of a given transmitter can 
overhear the so-called legitimate transmission and possibly 
extract private information 0. To avoid that, cryptographic 
techniques are usually implemented in the higher layers of 
the communication protocols to ensure confidentiality | |T0| . 

Such techniques, however, depend on secret keys and rely 
on the limited computational power of eavesdroppers, as well 
as the reliability guaranteed by channel coding at the physical- 
layer design. These assumptions may not always hold since 
devices with high computational power are getting cheaper and 
widespread. Moreover, they become expensive and difficult 
to achieve as the network scales 0, ini- In this context, 
physical-layer security comes as a promising alternative to 
complement cryptographic solutions, by adding not only se¬ 
curity at the physical-layer with strategies that guarantee 
reliability, but also confidentiality regardless of eavesdroppers 
computational power mi- 

Another interesting solution when dealing with wireless 
communication over multiple hops is the well-known coopera¬ 
tive relaying strategies 1T2),|T3). As pointed out in fT^ , such 
schemes are robust to fading and interference impairments 
due to the enhanced diversity. Additionally, as discussed in 
og, 0, cooperative diversity schemes also enhance the 
performance of networks secured at the physical-layer. 

All in all, the existence of multiple hops, interferers and 
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model that characterizes the uncertainty related to inter- 
ferers’ and eavesdroppers’ positions. 

• Closed-form solutions for the optimal multi-hop through¬ 
put considering or not the secrecy constraint as a function 
of network deployments parameters. 

• Identification of the operational regions proving that 
the optimal throughput subject to the secrecy constraint 
achieves the optimal performance if a feasible solution 
exists. 


Fig. 1. Schematic example of the proposed scenario. The black node is the 
aggregator (source), the blue node is the control unit (destination) and the 
green nodes are the relays, all of them defining the legitimate link. The white 
nodes are the interferers while the red nodes are the eavesdroppers, which 
attempt to illegitimately acquire the messages send through the multi-hop 
link. The network designer aims at maximizing the multi-hop throughput by 
properly deploying the relays and setting the coding rate used while respecting 
a given secrecy constraint. 


The remainder of this paper is organized as follows: Sec¬ 
tion [I^ introduces the system model and the main metrics used 
to evaluate the performance of the network. Section m and 
Section evaluate the trade-offs involved in the design and 
deployment of the network. Both sections offer comprehensive 
numerical results and discussions. Next, Section |V] contextu¬ 
alizes our results and current industrial standards. Finally, in 
Section |Vl] conclusions and final remarks are drawn. 


eavesdroppers further complicate the design of wireless com¬ 
munication systems in industrial applications. Fig. [T] exem¬ 
plifies an industrial deployment, where several sensors com¬ 
municate to an aggregator (black node), which by its turn 
communicates via relays with the control unit (blue node). For 
instance, an aggregator can act as a relay and help to convey 
the information to the control unit. The legitimate link is 
composed by an aggregator (black node), relays (green nodes) 
and the control unit (blue node). All other randomly distributed 
nodes in the network are assumed to be either interferers 
(white nodes) or (potential) eavesdroppers (red nodes). 

We assume that sensors are scattered throughout the in¬ 
dustrial facility to measure relevant information, which is 
processed by an aggregator node and then sent to the control 
unit. Note that the sensor measurements, their communication 
with the aggregetor and the information processing are all 
assumed to be perfect. To reach the control unit, the message 
may travel through relay nodes, forming a multi-hop, wireless 
link. At every hop, eavesdropper nodes attempt to acquire the 
messages transmitted through the legitimate link. 

For instance, the aggregator could attempt a single trans¬ 
mission via long hops, which means that the channel is used 
less times and then there is a lower chance of the message 
being decoded by the eavesdropper. At the same time this 
increases the chance that an eavesdropper, which is closer 
to the transmitter than the desired receiver, intercepts and 
acquires the information being transmitted. 

As we can observe, there are trade-offs regarding possible 
eavesdropper locations, number of hops, transmit power and 
decoding capabilities, which are function of the interference 
level perceived at the receivers. To assess such trade-offs, 
we introduce a tractable model based on to characterize the 
uncertainty related to interferers (jammers) and eavesdroppers 
positions and then proceed with a throughput optimization 
subject to a secrecy constraint. Then, the main contributions 
of this paper can be summarized as follows: 

• Analysis of the throughput of industrial communication 
networks under a secrecy constraint by employing a 


II. System model 


Let I? > 0 be the distance from the aggregator to the 
central unit, assuming that there exist in-between relay nodes 
employing a decode-and-forward strategy m- We consider 
that the relay nodes are deployed in the straight line defined 
by the aggregator and the central unit such that the distance 
d > 0 between any two nodes is the same. The number of 
hops is then computed as h = D/d. We assume that randomly 
scattered nodes attempt to jam the communication between the 
aggregator and the central unit. Then, if we assume that the 
jamming signals experienced by each receiver node along the 
multi-hop link are independent, the respective throughput T, 
with respect to the multi-hop link, can be computed as Q: 


log(l + /?) ^ 

• — ^ V-^SUC^ 7 


( 1 ) 


where Pguc is the probability that the message is successfully 
decoded by the receiver and /3 > 0 is the minimum required 
SIR for a successful reception. If we assume point-to-point 
Gaussian codes and interference-as-noise decoding rule 
the spectral efficiency of log(l -f /3), measured in bits/s/Hz, in 
the single-hop links is achievable if SIR> /3. 

If the network designer choose one long hop h = 1, the 
throughput is log(l + /3) Pguc- If more hops are desired, then 
more network resources are required and the overall spectral 
efficiency decreases in relation to the number of hops (i.e. 
the same information is transmitted at the expense of more 
channel uses). Nevertheless, if more hops are added, Psuc is 
expected to increase. These contradictory effects are captured 
by (0. 

We assume a field of jammers (malicious interferers) that is 
characterized by a 2-dimension uniform Poisson point process 
<hint with intensity Aint > 0, measured in transmitters per unit 
of area mi- We assume that the channel has two components: 
one related to the distance-dependent path-loss such that the 
received power decays with the distance and other related 
to fading. The received power at the node of interested can 
be computed as where Vi is the distance between the 
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reference receiver and the zth node, gi is the channel gain 
between them, and a > 2 the path-loss exponent GD- 

We consider the communication occurs in time-slot basis 
so that the slot length is the time required to transmit one 
packet ID- If the nodes’ positions and the channel gains 
do not change during the packet transmission, the signal-to- 
interference ratio (SIR) is computed a^ 


SIR = 


god “ 



( 2 ) 


To compute Pguc, we assume that the channel gains gi are 
independent and identically distributed exponential random 
variables (Rayleigh fading) and that the interferers’ positions 
change every time slot. In this way, each time-slot is a different 
realization of the point processes and the channel gains 
gi. From this assumptions, the success probability is ID^ 


where k = r(l + 2/a)r(l — 2/a). 

Let us now consider that there are eavesdroppers that are 
capable of decoding the transmitted messages if the SIR expe¬ 
rienced by them are greater than the threshold /3eav > 0|^Their 
spatial distribution are modeled as a 2-dimensional uniform 
Poisson point process $eav with intensity Aeav > 0, measured 
in eavesdroppers per unit of area. The channel gains in relation 
to the transmitter are modeled as in the interferers’ process 
described above (quasi-static Rayleigh fading and distance- 
dependent path-loss). As before, a different realization of 
the point process and channel gains are assumed at every 
different time-slot. In this scenario, due to the lack of any side 
information regarding the specific position and the channel 
gains, it is not possible to guarantee 100% of secrecy in the 
communication of the desired link. 

Herein, we assume a secrecy constraint referring to the 
aggregator-control unit multi-hop link. In this case, the proba¬ 
bility that the eavesdropper illegitimately acquires the message 
should be, statistically, lower than or equal to e%. To compute 
such probability, we need to evaluate the outage probability in 
the eavesdroppet^l The probability density function (r) of 
distance r between an arbitrary point to the closest point of a 
Poisson point process with intensity Aeav is given by flTj : 

/iti (r) = Aeav 27rre“^'’‘‘''’"’'". (4) 


Similarly to 0, the outage probability ^out:eav (i.e. the 
probability that the packet is not successfully decoded) at the 


^We assume here interference-limited networks. As pointed in |20| , the 
inclusion of the noise power leads to a more complex analysis without 
providing any significant qualitative difference. 

^This threshold may reflect how powerful are the eavesdroppers: a low /3eav 
indicates that the eavesdroppers are able to successfully decode messages even 
with low SIR, reflecting a powerful decoding scheme. 

^In fact this is an approximation since there will be closer eavesdroppers 
that experience a better channel. This, however, is a good approximation and 
holds in most of the cases for the spatial densities considered here. 


eavesdropper can be computed as ID: 

p , —IP [-1 _ „-Ai„tKirr-^(/3oav)^''° 
outieav — ^ 

_ AintAt(/jeav)^^° 

AintK(/3eav)^/“ + A eav 


(5) 


where E,. [•] is the expected value in regard to the distance r 
given by 0. 

We are now ready to state the optimization problem of 
interest as follows: what are the hop length d and SIR 
threshold /? that jointly optimize the multi-hop throughput 
T given by Q while the secrecy constraint e is satisfied? 
Mathematically, we have the following: 

^ diogji + fi) 


max 

(/3.d) 


S.t. 


/ Aint^(/3eav)^^° 

\Ai„tK(/?eav)^/“ + A e 


D/d 


( 6 ) 


> 1 - e 


where the constraint is the probability that the eavesdropper 
links are in outage at every hop of the multi-hop link with a 
probability greater than equal to 1 — e. 

III. Unconstrained optimization 

Let us start presenting the solution of the unconstrained 
optimization problem assuming that the number of hops h 
can be a real number so that the hop length d can assume any 
positive value for a given D. 

Proposition 1: The pair {fi*,d*) of the unconstrained ver¬ 
sion of the optimization problem given by (|^ is: 

+ (7) 

^ i^Ai„t«7r{/3*)2/«’ 

where W nf-) is the principal branch of the Lambert W 
functiorfl |l9[ , which is defined as a; = such 

that X > —e~^ and Wo(a;) > —1. 

The optimal throughput T* is then: 

log 

T* = -- - -. (9) 

elog(2)i9AintK7r ^-1 -f ^ 

Outline of proof: The first step is to show that multi-hop 
throughput T in ([^ is a quasi-concave function in terms of 
both d and /3. Then, the pair (/?*, d*) that leads to the optimal 
unconstrained throughput T* can be found as the joint solution 
of the following partial derivative equations dTjdd = 0 and 
dT/dfi = 0. 

Solving that system of equation, we find the equilibrium 
point {fi*,d*) that is given by 0 and 0. Inserting these 
values into multi-hop throughput given by 0, we obtain 
equation (|^. ■ 

Fig. 0 exemplifies how the optimal throughput T* varies 
with the density of interferers Aint for different multi-hop 
distances D. One can see that the lower densities Aint yields 
higher optimal throughputs, regardless of the multi-hop dis¬ 
tance considered. Looking at the multi-hop distances, we find 
that the lower the distance D, the higher the throughput T*. 

have used the function LambertW(-) from the library SymPy |2l|. 
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Fig. 2. Optimal multi-hop throughput T*, given by |^, as a function of 
the density of interferers Aint for different values of multi-hop distance D, 
considering a = 4. 


Although those results are somehow expected, it is interest¬ 
ing to analyze the reasons behind this behavior, which will 
later help us to understand the solution of the constrained 
optimization. From 0, the optimal value of /3* is independent 
of any other parameter of the system, but the path-loss 
exponent a, which is not under the designer control. Therefore, 
/3* is fixed if a is fixed and the single-hop distance d* is the 
variable that changes with Aint and/or D, as indicated by ([^. 

Equation 0 shows that the optimal throughput T* is 
inversely proportional to Aint and D. It is worth noting that 
for small values of D and/or Aint, T* tends to infinity. This is 
a byproduct of our assumptions and clearly does not represent 
actual scenarios. Although, we understand this limitation, we 
still believe that the simplicity of our results can provide clear, 
and reasonable, guidelines on the network design. 

When the same Aint is considered, the optimal throughput 
T* is determined only by D: if a packet needs to travel 
longer source-destination distances, the single-hops should be 
surprisingly smaller to support the optimal coding rate /?*. 
This happens because the smaller the single-hop distance, the 
higher the SIR experienced by the receiver nodes. In this case, 
having more shorter hops is statistically more advantageous 
than having less longer hops. A similar analysis is also valid 
when assessing the case when the same multi-hop distance is 
assumed D and the intensity Aint is varying. 

Although the results showing that longer distances D and 
higher intensity of interfere!' nodes Aint degrade the throughput 
are expected, the design choices (^*, d*) that optimize the 
multi-hop throughput T are rather surprising. In the next 
section, we will see how the secrecy constraint will affect the 
optimal system design. 

IV. Constrained optimization 

Let us now focus on the optimization problem subject to the 
secrecy constraint stated in (|^. We first recall that the network 
designer does not have any control on the eavesdropper 


parameters so that Aeav and /3eav are input variables (i.e. 
external factors). 

Lemma 1: The secrecy constraint given by 0 can be 
rewritten as 


d < dc < D, 


( 10 ) 


where the new constraint dc is given by: 

P In" ( -^intK(/3eav)^^“ 

^ ^ Uint«(/3aav)^/“ + A, 

log(l - e) 


1 


( 11 ) 


Proof: We start by manipulating the secrecy constraint 
from (|^ as follows: 


D / AintN(/3eav)^^° \ 
d \ AintK(/?eav)^'^“ + Aeav / 


> log(l 


e) ^ 


/ Ainttt(/3eav)^^“ \ 

\ Ainttv(/3 eav )2/a _j_ J 

log(l - e) 


( 12 ) 


We now use the fact that the single-hop must have a length 
lower than or equal to the multi-hop d < D and that the 
distances are strictly positive to conclude this proof. ■ 


Proposition 2: The solution of the constrained opti¬ 
mization problem stated in is given in Proposi¬ 


tion 


0 


with 


log ( 

log ( 


Aint«(/3eav)^^ 

Aint^(^eav)^'^“ +A, 

Ajnt ^(^ei 


< log(l - e) < 


s2/o 


1/2 AintK7r(/3eavj ' iOg 

Proof: Let us start by considering the second part of the 
secrecy constraint given by Lemma namely dc < D . \f 


l0g(t 


Aint/^(/3eav) 


2/q 


> log(l - e)’ then dc > D, the 
secrecy constraint is then violated and the problem has no 
feasible solution. 


In the case where 


l°g(A- 


Aint«(;3eav)^''° 


t>.(/3ea v)^/°+Ae.. ) ^ lOg(l-e), We 

need to verify the constraint c? < dc. As stated in Proposition 
[2 the optimal choice of /3* only depends on a. Therefore 
we focus on the optimal single-hop distance d* given by 0: 
the optimal solution can be only obtained if the inequality 

d* = —^ , < dc is satished. ■ 


D\s 


int^T 


{^h.)2/o 


Corollary 1: The solution of the constrained 

optimization problem stated in 0 does not exist if 

>“8 [ CSfljd'f... ) > 1»S(1 - «) »"<! T- = 0. 

Proof: This proof follows from the first part of the proof 

of Proposition!^ when log ( Aiat^^tdeavL/^+Aeav ) > 
implies that the problem has no feasible solution. ■ 


Remark 1: In the scenarios under investigation, the inequal¬ 
ity d* dc holds due to the combination of the system 
parameters and target variables. 


Prom this remark and the analytic results previously stated, 
the solution of optimization problem with secrecy constraint 
only depends on the relation between dc and the multi-hop 
distance D for the cases studied here. More specifically. 
Corollary tells us that the optimal solution exists if the 
secrecy constraint e is achievable for the network density of 
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Fig. 4. Optimal multi-hop throughput 'T* as a function of the density 
of interferers Aint for D = 3, a = 4 and e = 10%. We consider the 
unconstrained optimization given by and the numerical solution of 


interferers Ai„t, density of eavesdroppers Aeav their SIR 
threshold /3eav considered. 

Fig. [3] (presented in the next page) shows the distance 
constraint as a function of the eavesdroppers’ SIR threshold 
/3eav for different combination of densities Aint and Aeav One 
can see that lower SIR thresholds /3eav cause the unfeasibility 
of the optimal solution. As expected, if the eavesdroppers are 
able to decode messages with low SIR, then their chance of 
correctly decode the information of the legitimate link grows, 
regardless of the densities Aint and Aeav 

The effects of Aint and Aeav are the following. The higher 
the density of eavesdroppers Aeav. the stricter is the distance 
constraint d^. This is due to the fact that big values of Aeav 
lead to greater probabilities that a eavesdropper node is closer 
to the legitimate link. This, in turn, requires a more stringent 
dc to satisfy the secrecy constraint e. 

The increase of the density of interferers Aint, on the other 
hand, helps the secrecy of the legitimate link. This is in line 
with the general literature on physical layer security (e.g. 122)) 
since higher Aint leads to probabilistically lower SIR. This will 
then result in more outages in the eavesdropper links, making 
the distance constraint dc less stringent. 

Fig. 1^ shows an example of the optimal constrained multi¬ 
hop throughpuj^ in relation to the unconstrained case. The 
optimal multi-hop throughput T* is plotted as a function of 
Aint for I? = 3, a = 4 and e = 10%. One can verify that 
the constrained optimization can achieve the unconstrained 
performance if the solution of the problem is within its 
feasibility region, which can be analytically determined as 
predicted in Corollary [T] 

V. Implementation and deployment aspects 

As previously mentioned, the scenario under analysis is a 
simplihed, abstract, version of an actual industrial communi- 

^To solve the constrained optimization , we have used the numerical function 
fmin_l_bfgs_b from the library SciPy |23|. 


cation network. In any case, we would like to reinforce the 
value of our results, which are simple enough to characterize 
important trade-offs on the system design. In the proposed 
model, we do not assume any information about interferers and 
(malicious) eavesdroppers, which might be a more practical 
consideration. For example, the design of a physical-layer 
secured network assumes some information about eavesdrop¬ 
pers as in 0, |TT). Therein, each transmitter attempts to 
convey its message in a reliable and confidential way, once 
they are aware that non-intended receivers may be overhearing 
their transmission. In the case of interference, there are well- 
established approaches that uses the channel and/or location 
information to increase the system throughput. 

In what follows, we briefly discuss some of the major 
standardization efforts, which could benefit from our results. 
For instance, ZigBee (IEEE 802.15.4) and Bluethooth (Low 
Energy) network standards serve not only for industrial appli¬ 
cations, but also for home automation for instance 0. m- 
Both standards are low-power and have limited communication 
range (few tens of meters in indoor environment), and thus 
could take advantage of our guidelines; a large number of 
hops in short range communication is preferable over long 
hops. Another possible alternative for wireless industrial is 
WirelessHART p4| , which has already embedded functional¬ 
ities that allow information relaying. 

It is worthy noting that our discussions so far are based 
on industrial environments; however, our results also extend 
to modern (smart) power grids due to the similarities of the 
communication environment. Eor instance, smart grids also 
present a distinct profile of interference due to the highly 
reflective materials and electromagnetic interference from the 
machinery, especially at distribution side. Besides, commu¬ 
nication links suffer additional interference from concurrent 
transmissions from neighboring devices and aggregations as 
discussed in | |25l . This initial assessment is then extended in 
order to include not only reliability analysis but also security 
and privacy in |26|. This evinces the potential applications and 
relevance of our results. 


VI. Conclusions and Einal Remarks 

This paper analyzes the throughput of industrial multi¬ 
hop machine-to-machine networks under a secrecy constraint. 
The scenario under analysis consists in an aggregator node, 
which collects and processes the sensor measurements, and 
a control unit that needs the proceeded information. This 
communication is wireless and may occur over multiple hops, 
and the communication engineer is expected to And the 
optimal position of the relay nodes and the coding rates used 
in the single-hop links so as to maximize the throughput in 
[bits/s/Hz] while respecting a given secrecy constraint. 

By employing our stochastic-geometric-based model to 
characterize the uncertainties involved in the eavesdroppers’ 
and interferers’ positions, we first showed that the optimal 
choice without any secrecy constraint of coding rate (spectral 
efficiency) depends only on the path-loss exponent and nor¬ 
mally assumes high value. To sustain such high rate, a great 
number of shorter hops are then preferable to a small number 
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Fig. 3. Distance constraint as a function of the eavesdroppers’ SIR threshold /Seav for different combination of densities Amt ^nd Aeavi assuming 
the path-loss exponent a = 4 and secrecy constraint e = 10%. We consider the multi-hop distance D = 3 that is presented by the red line. When the 
dc < D = 3, then the optimal solution of exists and it is given by Proposition^ 


of longer hops. When the secrecy constraint is assumed, we 
proceeded with the throughput optimization and proved that 
the unconstrained performance can be achieved with the same 
optimal relay positions and coding rates only if a feasible 
solution exists. Otherwise, there is no solution for the problem 
that satisfies the minimum level of secrecy required. 

As a next step, we expect to evaluate our guidelines in actual 
industrial environments by following the insights provided 
herein. To do so, we aim at designing a feasible experimental 


deployment that utilizes established standards for industrial 
wireless systems. It is also important to point out that, al¬ 
though this analysis has been presented focusing on industrial 
deployments, our framework can be also extended to different 
kind of smart applications such as homes, cities, energy grids 
or highways. 
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